pendle-plugin

SUSPICIOUS. The skill’s trading behavior matches its stated Pendle purpose and its confirmation protocol is unusually safety-focused, but it still installs multiple external components and a checksum-verified yet source-unseen binary, then enables real on-chain financial actions. Main concern is install trust and transitive trust, not clear credential theft or covert exfiltration.